refactor authentication check on pages to use app.isAuth()